TBK.DVR.SOSTREAMAX.Command.Injection

Description

This indicates an attack attempt to exploit a Command Injection Vulnerability in TBK DVR-4104 and DVR-4216.
The vulnerability is due to insufficient validation of user-supplied input in the application. A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.

Outbreak Alert

Threat Actors are actively exploiting CVE-2024-3721, a command injection vulnerability in TBK DVR devices (Digital Video Recorders). This flaw allows unauthenticated remote code execution (RCE) via crafted HTTP requests to the endpoint. The compromised devices are conscripted into a botnet capable of conducting DDoS attacks.

View the full Outbreak Alert Report

Affected Products

TBK DVR-4104 version prior to 20240412
TBK DVR-4216 version prior to 20240412

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are unaware of any vendor supplied patch or updates available for this issue.